Hey as per below, i have am polling a http and passing through the csv filter pulling date which works fine. However I need to convert the epoch timestamp to readable date and time. I have tried a few different ways with no luck including convert in the csv plugin and the date plugin.
I have even tried deleting the indexes and letting it pull again but the data still comes through as 'text'
filter {
## Parse values from "cdr" array and create a field for each value ##
csv {
source => "message"
separator => ","
skip_header => "true"
columns => ["callref","created","time_start","direction","platform","source","destination","clid","to","duration","billable_time","billed_cost","definition"]
#convert => {
# "created" => "date_time"
# "time_start" => "date_time"
#}
target => "cdr"
}
date {
match => [ "created","UNIX_MS" ]
target => "created"
timezone => "UTC"
}